This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/5KspkUlNT9BbAUaOg4XWjrocZnM.roa File: 5KspkUlNT9BbAUaOg4XWjrocZnM.roa (raw, json) Hash identifier: 1rw1PhJZEsHj02oRb/8duN7T9vEuiylU/SbsI5Ekwko= Subject key identifier: E4:AB:29:91:49:4D:4F:D0:5B:01:46:8E:83:85:D6:8E:BA:1C:66:73 Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062 Certificate serial: 019B7EA463B605B62FFDCD75617E168ECE37 Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/5KspkUlNT9BbAUaOg4XWjrocZnM.roa Signing time: Fri 02 Jan 2026 12:17:41 +0000 ROA not before: Fri 02 Jan 2026 12:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57141 IP address blocks: 149.154.80.0/21 maxlen: 21 185.131.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:63:b6:05:b6:2f:fd:cd:75:61:7e:16:8e:ce:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062 Validity Not Before: Jan 2 12:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4ab2991494d4fd05b01468e8385d68eba1c6673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:29:b5:c8:24:9b:39:e4:25:63:25:eb:8f:93: ab:82:32:a5:fb:cc:a4:de:6a:0f:2f:02:cd:58:c0: ae:a3:dc:61:63:f4:40:fb:18:44:49:0e:09:28:62: 06:62:d0:16:9c:9b:b9:09:60:0c:e0:f2:f6:f6:cf: 13:d4:ef:ba:ac:79:ed:95:5c:c3:45:6d:e5:8c:79: ed:9c:e9:1d:2d:71:50:9f:53:d3:e5:1f:4c:87:e6: 37:86:c8:d5:7a:cd:9b:11:57:9e:44:51:63:c0:b3: 30:70:2e:53:84:35:4c:53:66:82:71:bf:10:70:5b: 0c:67:76:18:48:00:4f:0e:44:1d:c8:a6:2a:ec:2e: e2:6e:94:92:75:90:b8:f3:bb:ef:3d:a2:6c:e2:62: ca:9e:69:4f:fb:80:4d:70:56:c8:57:4c:5a:6e:23: a0:e7:9a:7d:7f:f4:82:64:3b:a6:db:6f:fe:45:18: 70:d8:d0:be:2d:3b:ec:73:72:41:67:f6:df:8a:9e: 23:0e:3e:98:bc:97:38:2a:ed:d9:ea:55:f0:6f:3e: 5b:64:ef:ce:ec:07:fb:71:2b:e6:d1:10:79:bf:c7: 07:bc:ca:66:08:5c:48:97:83:4a:7e:de:bd:1f:e7: 7a:7a:30:e8:cc:b9:0f:24:0d:c8:6f:d5:db:fb:e8: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AB:29:91:49:4D:4F:D0:5B:01:46:8E:83:85:D6:8E:BA:1C:66:73 X509v3 Authority Key Identifier: keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/5KspkUlNT9BbAUaOg4XWjrocZnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.154.80.0/21 185.131.192.0/22 Signature Algorithm: sha256WithRSAEncryption 38:6a:7f:04:77:a0:c1:a2:91:1e:45:36:56:d3:84:01:07:20: e2:44:c7:e6:75:2e:4a:46:17:20:5f:37:9e:ff:e7:13:18:29: c8:a2:4e:7e:75:f5:3a:10:ff:d3:e2:d3:7e:17:2c:2c:99:10: 87:6e:d8:19:d6:e5:38:07:27:50:00:fe:9f:3b:6f:54:2f:33: 9e:5a:94:8f:93:8c:61:57:de:33:8c:c4:8c:21:77:6b:c3:aa: 2e:42:6c:d3:db:d9:6d:58:63:d3:1e:c0:3f:7e:3e:e2:03:ae: 58:9c:61:8d:66:37:80:1e:4e:ae:d1:3f:8a:12:41:26:70:ba: d3:f1:d2:8e:b4:9f:50:80:d9:07:31:c8:60:a5:8d:f4:84:ce: df:a5:13:3f:50:54:80:cf:5d:0b:44:66:76:ce:31:2f:ce:99: 90:66:8e:ca:bf:9b:74:21:59:79:2d:3c:8a:ec:de:b0:59:99: d0:a0:a3:f5:16:96:af:2b:82:38:c9:76:07:21:09:e6:70:19: 57:05:2b:e0:00:64:6e:16:e3:b2:ce:31:a2:1b:36:75:7f:56: 7c:a1:12:9f:d5:31:c2:82:d8:b3:a1:80:1c:41:ca:87:a1:1c: 75:51:3c:1f:50:c9:eb:91:2a:ad:cb:50:97:60:5d:43:94:54: 9b:b6:5b:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pGO2BbYv/c11YX4Wjs43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYzUxMzg2YWNmMDViM2FhYjYxODEwNDc0NzhkNmVlYTFi ZjAwNjIwHhcNMjYwMTAyMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGFiMjk5MTQ5NGQ0ZmQwNWIwMTQ2OGU4Mzg1ZDY4ZWJhMWM2NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Sm1yCSbOeQlYyXrj5OrgjKl+8yk 3moPLwLNWMCuo9xhY/RA+xhESQ4JKGIGYtAWnJu5CWAM4PL29s8T1O+6rHntlVzD RW3ljHntnOkdLXFQn1PT5R9Mh+Y3hsjVes2bEVeeRFFjwLMwcC5ThDVMU2aCcb8Q cFsMZ3YYSABPDkQdyKYq7C7ibpSSdZC487vvPaJs4mLKnmlP+4BNcFbIV0xabiOg 55p9f/SCZDum22/+RRhw2NC+LTvsc3JBZ/bfip4jDj6YvJc4Ku3Z6lXwbz5bZO/O 7Af7cSvm0RB5v8cHvMpmCFxIl4NKft69H+d6ejDozLkPJA3Ib9Xb++i8JQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOSrKZFJTU/QWwFGjoOF1o66HGZzMB8GA1UdIwQY MBaAFKLFE4as8Fs6q2GBBHR41u6hvwBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUt N2Q2ZjUzODg5ZDU3LzEvNUtzcGtVbE5UOUJiQVVhT2c0WFdqcm9jWm5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUtN2Q2ZjUzODg5ZDU3 LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDlZpQAwQC uYPAMA0GCSqGSIb3DQEBCwUAA4IBAQA4an8Ed6DBopEeRTZW04QBByDiRMfmdS5K RhcgXzee/+cTGCnIok5+dfU6EP/T4tN+FywsmRCHbtgZ1uU4BydQAP6fO29ULzOe WpSPk4xhV94zjMSMIXdrw6ouQmzT29ltWGPTHsA/fj7iA65YnGGNZjeAHk6u0T+K EkEmcLrT8dKOtJ9QgNkHMchgpY30hM7fpRM/UFSAz10LRGZ2zjEvzpmQZo7Kv5t0 IVl5LTyK7N6wWZnQoKP1FpavK4I4yXYHIQnmcBlXBSvgAGRuFuOyzjGiGzZ1f1Z8 oRKf1THCgtizoYAcQcqHoRx1UTwfUMnrkSqty1CXYF1DlFSbtlv2 -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:15 2026 by rpki-client